Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/oHzSetIO7ELhcrU1q2yicQ3fl1Y.roa
File: oHzSetIO7ELhcrU1q2yicQ3fl1Y.roa (raw, json)
Hash identifier: tXnoAlBF5jnk3U8sHMSJUBuZTJUAlLMn5x/b91MNomE=
Subject key identifier: A0:7C:D2:7A:D2:0E:EC:42:E1:72:B5:35:AB:6C:A2:71:0D:DF:97:56
Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial: 01856C6EDBC62B76330DA496566BE9D8CD23
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/oHzSetIO7ELhcrU1q2yicQ3fl1Y.roa
Signing time: Sun 01 Jan 2023 08:24:42 +0000
ROA not before: Sun 01 Jan 2023 08:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197293
IP address blocks: 46.31.248.0/21 maxlen: 24
185.15.160.0/22 maxlen: 24
178.248.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:db:c6:2b:76:33:0d:a4:96:56:6b:e9:d8:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Validity
Not Before: Jan 1 08:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a07cd27ad20eec42e172b535ab6ca2710ddf9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:14:e0:10:52:68:c4:47:ce:cf:53:78:60:
4e:c3:5b:25:1a:d0:dd:39:74:77:09:a2:a4:d5:a3:
fd:e0:fe:88:72:70:2b:05:ce:35:9d:7e:b0:1c:b3:
f5:5d:a9:ab:2e:6c:14:d2:41:f6:30:a4:47:2f:fb:
ab:c1:42:a8:42:f1:60:bf:27:ea:37:de:c8:66:8b:
52:d2:b0:54:af:42:f8:11:d2:a1:ae:55:19:69:4e:
e0:e0:1c:f4:f0:ff:8c:db:21:1a:59:c3:36:fa:4b:
bf:21:31:00:c5:4c:ad:80:be:65:4f:b0:17:8b:88:
cb:70:7d:d8:ec:db:d0:1b:ad:d4:92:26:08:5c:a8:
60:b4:fa:80:1c:4b:b8:37:a7:ad:30:f1:71:a6:ab:
ad:fc:22:59:12:12:04:ae:74:58:0a:cf:84:9c:45:
3f:16:55:50:19:2e:8a:11:1a:5c:1f:75:3c:79:2e:
54:ae:46:2c:27:4c:62:b0:11:9f:a7:87:f7:c1:3f:
3d:b4:a9:fe:34:39:aa:db:dc:a5:c5:6d:e8:7c:45:
56:78:4a:5b:c4:0f:28:20:4d:55:37:75:99:4b:46:
65:83:9c:6e:0d:84:34:ae:38:6a:d2:95:68:ce:3a:
4c:39:92:8a:3f:fb:bf:b6:5c:19:ab:50:1c:62:e5:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:D2:7A:D2:0E:EC:42:E1:72:B5:35:AB:6C:A2:71:0D:DF:97:56
X509v3 Authority Key Identifier:
keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/oHzSetIO7ELhcrU1q2yicQ3fl1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.248.0/21
178.248.144.0/21
185.15.160.0/22
Signature Algorithm: sha256WithRSAEncryption
29:da:44:5a:da:b1:9e:01:ab:a3:03:04:69:20:3c:ae:bf:81:
c4:4f:a7:db:f2:4b:62:8c:72:d3:fb:4e:19:1d:0a:9f:cc:9f:
d5:f0:66:de:c6:8e:b1:fc:e8:a7:7c:72:d0:ae:d0:1b:d8:1f:
f6:64:84:0d:cc:35:d0:07:43:35:94:be:5e:0c:aa:ac:d1:97:
43:c0:21:68:41:c6:52:e9:f5:9a:56:22:59:a8:dd:5f:51:60:
3d:26:fd:99:7e:40:56:47:d1:b7:19:e2:12:60:64:a9:36:cb:
50:20:f8:b5:d4:e3:34:d9:b9:18:b4:f9:98:02:da:24:74:09:
86:56:07:13:b1:d7:c7:59:6f:f5:9c:ea:10:45:d1:d7:c9:ca:
80:5f:e2:07:d1:f8:96:e1:f1:46:b8:be:d1:bb:aa:b9:32:28:
08:bd:f6:5f:f8:5d:e9:98:23:fc:ab:ae:c8:79:71:e9:a3:86:
db:98:dc:06:d8:1e:4b:3b:56:0f:f4:74:02:91:2d:07:86:cd:
21:84:54:ff:41:d4:eb:46:7a:d7:0d:2f:81:7d:c6:70:91:c5:
c7:e6:6b:7a:97:5c:8b:88:45:ca:fd:ca:03:d1:16:58:44:35:
70:82:35:d3:f8:03:64:0e:51:47:8f:1a:7f:76:72:54:9c:9b:
ba:97:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org